Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft
File: br06JpeFEjrcP0lmOa7fsQ8w1hg.mft (raw, json)
Hash identifier: 5LbsCxqP7Ioi3LKJajgGOxDSCHi7espyFgoOcEvl5/Y=
Subject key identifier: 91:FD:41:5E:FD:54:29:70:DB:EF:F8:39:44:53:57:26:73:41:D6:5B
Authority key identifier: 6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18
Certificate issuer: /CN=A91EECAF/serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618
Certificate serial: 0AE1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft
Manifest number: 0A94
Signing time: Fri 28 Mar 2025 19:52:24 +0000
Manifest this update: Fri 28 Mar 2025 19:52:23 +0000
Manifest next update: Fri 04 Apr 2025 19:52:23 +0000
Files and hashes: 1: br06JpeFEjrcP0lmOa7fsQ8w1hg.crl (hash: AHWBYKi81Gu5gBNeLxuVmcM/qNGrEraL/xzK+CS3s3M=)
2: 3061606C730211EE89A20645C4F9AE02.roa (hash: FXx7Bk+LSYPn2DbNqZNWdevC6/zZKAPhSGR/vJ/qik0=)
3: 829DF1C85EA811EAA1DC5284C4F9AE02.roa (hash: iknqna89TW/HbAaXthnpwwg5JkeF8vXOwE4qxXSZgG4=)
4: D2A2964A0CAE11EDA6E8C661C4F9AE02.roa (hash: CABbTp6UNgoFkAnkzoRiqNqMk0AS+9bRSopXP3S0HFg=)
5: 121EADE62F7011EF82514126C4F9AE02.roa (hash: ihD/TP8wzm3AP+GWZyveI05SPhzXY8QK3k8hlGMiXlk=)
6: 64EF221EC29D11EBBAF29939C4F9AE02.roa (hash: 1qHYObrYudiYgibzrU8KwyfeamtYSWUG4T63izo1hCM=)
7: DE5B4B680B8411EFBE929A1DC4F9AE02.roa (hash: PcYIKOUqdNO/bkxZAwgmcGO1UnW7FmUMUSGrGsMq3X8=)
8: CB9407D62F6F11EF9E2E8C25C4F9AE02.roa (hash: eid23pnQ82EhRmvjGDSr110fGHDISGgFAGu/Ig0F0Z4=)
9: 53CAA3B2023811EBA421D755C4F9AE02.roa (hash: gjOpVTIrCg/GRDI2g0j816CEONXvKaN06KAW+xe46vM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2785 (0xae1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EECAF
Validity
Not Before: Mar 28 19:52:23 2025 GMT
Not After : Apr 4 19:52:23 2025 GMT
Subject: CN=67e6fdf7-68a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e5:f8:c9:85:ef:a1:45:c1:94:d5:56:ff:66:
12:65:aa:0b:0a:6a:6f:f7:3b:fb:7c:96:45:a7:4e:
29:e5:fc:e7:1e:47:3c:2b:15:2a:a2:ae:d7:a1:cb:
76:e8:7c:7e:fd:3e:a8:7b:fc:f5:98:bd:03:22:0a:
e8:e6:cb:08:11:29:16:09:a5:56:12:76:40:61:6e:
4b:13:92:25:88:4d:e1:9c:18:81:2f:ed:cf:c3:7f:
cf:ce:ec:1b:a3:18:13:55:49:7a:c4:0d:8e:c2:d1:
ff:ce:c9:ed:54:e3:11:16:7f:34:58:da:ba:33:4a:
1b:ba:0b:02:c5:1a:ca:bf:1a:5c:f3:21:67:8e:44:
ec:f9:61:15:cd:4f:e3:e1:fa:55:2f:a4:74:63:95:
cd:08:e3:39:52:b4:67:8f:91:4b:ca:7e:e2:83:94:
5b:6a:20:5c:04:44:15:77:0a:20:c7:8d:3a:9d:7a:
a5:70:93:f6:ff:bf:fb:6f:80:40:2a:90:a3:49:24:
2c:28:b1:40:96:13:12:c7:2a:9a:ad:96:03:a5:c6:
9e:f0:e1:3b:ef:b9:e6:51:1d:5a:23:56:06:f3:9e:
4c:25:28:3e:1a:bc:a5:4b:41:f5:31:1f:e5:a0:c6:
0c:a9:45:48:95:97:33:52:3e:e5:89:de:0e:4b:fb:
a1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:FD:41:5E:FD:54:29:70:DB:EF:F8:39:44:53:57:26:73:41:D6:5B
X509v3 Authority Key Identifier:
keyid:6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:1c:b0:5b:fc:94:c9:49:3c:97:4b:1f:9d:1d:12:54:62:04:
d1:0c:52:6e:86:54:94:c2:fe:cc:ab:61:89:37:44:ad:6f:8f:
df:b9:03:85:cc:b0:85:54:e8:d9:c9:c4:38:c1:27:06:60:c1:
6f:c7:5b:c3:8e:b0:95:ff:2f:94:b4:1d:c7:e5:88:82:80:5c:
fb:9f:2b:7d:7c:14:f3:e5:e4:fe:54:d5:5e:86:a9:27:e4:78:
42:bc:85:f3:62:e6:ef:a4:62:5d:a0:c1:25:30:90:d5:c9:c4:
33:ee:86:7f:9f:90:e5:4a:89:5a:f0:bd:df:39:7f:b2:59:b0:
72:2f:4c:70:80:dc:14:b8:2a:45:9e:08:a3:7e:ae:43:02:cd:
63:c3:b2:c3:a3:58:41:0d:7c:64:ba:5e:e1:47:ff:36:bb:ee:
1a:f2:c9:88:8d:65:95:44:e8:88:cd:d3:02:fc:71:e0:6e:d6:
fd:8b:86:3e:42:ff:a7:4b:87:a5:48:73:f0:87:80:ac:cc:64:
fc:35:48:89:03:b7:e5:28:a0:10:05:e7:40:ab:91:bd:23:7f:
f3:9b:67:cc:ac:49:da:f4:89:5b:68:dc:b0:cf:a4:58:13:68:
0c:de:0b:c5:1b:8a:7d:ca:9a:eb:ba:4f:43:ce:51:27:68:85:
93:2a:9b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:46:36 2025 by rpki-client